$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft File: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft (raw, json) Hash identifier: 27KS25St59hLRN+MpnFG8n3/GqW/t/joPJy/mc1Uuoc= Subject key identifier: 1C:27:EB:89:2A:77:44:B2:71:10:0E:CA:7A:15:5D:FC:3F:F4:47:1C Authority key identifier: DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 Certificate issuer: /CN=A91CDCF5/serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft Manifest number: 40 Signing time: Mon 11 May 2026 08:39:13 +0000 Manifest this update: Mon 11 May 2026 08:39:13 +0000 Manifest next update: Mon 18 May 2026 08:39:13 +0000 Files and hashes: 1: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl (hash: x/BIdezrJrzm6rxlypQ9tidKEChpoWre9TmamIAExMM=) 2: D7C273FAF1EF11F0A394FA90446F56BC.roa (hash: A79k1yFYKBfdbEJpqBRI+HCzddA3FuLd0fdzTClpX6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCF5, serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Validity Not Before: May 11 08:39:13 2026 GMT Not After : May 18 08:39:13 2026 GMT Subject: CN=6a0195b1-51c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f4:ff:8d:84:1c:43:95:fb:52:6f:80:21:ef: 55:f8:24:6b:88:59:e6:78:45:d8:85:d3:60:d2:6f: 0d:3b:37:1e:98:28:27:22:0d:93:b0:4f:8a:9e:c6: 8c:75:30:bc:85:f8:fc:e3:13:8c:6a:c2:dd:dc:99: c8:0b:96:c1:3c:ad:2a:cb:10:86:16:f1:17:7f:e8: d7:35:d1:17:75:58:df:cd:82:54:41:eb:62:a8:50: 96:81:04:a3:72:b4:02:bc:67:40:ee:ca:77:15:71: 2a:e2:6b:46:6a:b6:58:9b:c0:ef:b2:59:96:47:f6: 49:77:09:a2:aa:1b:90:6b:2f:39:dc:17:35:b0:e4: a8:be:df:47:67:e6:2f:f9:63:e1:c2:55:8b:3d:f2: f1:17:68:d1:4d:db:6e:32:1b:ed:ce:f4:52:b8:0a: d6:3d:21:7d:9d:12:fc:1d:76:73:10:dc:cc:bb:03: 00:20:53:5e:ec:fa:a2:a7:f5:71:7b:be:0c:bf:a1: 21:e0:ae:86:1b:4c:a7:1f:6a:11:49:d4:e3:ff:e4: 74:38:80:d4:dc:c0:25:77:ed:be:8e:7a:dd:1e:62: bf:61:3e:4f:76:e1:57:d1:94:8c:2e:36:b5:4b:ef: e2:21:f2:de:fb:87:d3:ed:b9:2e:14:2b:d4:82:ed: c2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:27:EB:89:2A:77:44:B2:71:10:0E:CA:7A:15:5D:FC:3F:F4:47:1C X509v3 Authority Key Identifier: keyid:DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:53:c3:3d:83:76:0b:19:af:f3:fe:90:46:0b:c0:58:74:4e: 59:a0:06:cc:85:35:54:22:74:19:58:54:dd:f3:66:36:49:88: 43:01:ec:0e:a6:dd:c9:9a:46:50:34:56:26:dc:3b:2b:f5:1d: e6:6e:f9:57:5f:2a:a1:77:5d:96:a8:6c:7e:4f:37:86:95:d5: 14:e1:8a:5a:8a:e4:83:a2:bd:c5:f6:09:a5:ff:23:ed:60:12: 68:c8:fc:49:77:65:6a:29:d3:9f:11:b0:3d:13:6f:3a:5d:d1: f7:c8:60:ca:0f:67:fc:9e:6a:16:13:6e:e9:e8:71:26:85:ab: a9:aa:ad:1a:d2:f2:02:f7:b3:5f:4f:e7:e7:d9:05:cc:7f:da: 97:6b:3a:73:cd:c4:29:fd:fc:ee:2b:22:b6:d9:63:9d:c7:1f: de:f4:06:66:8f:eb:06:a2:e1:cf:86:b2:ab:d8:e1:45:6d:5f: f3:23:9a:4b:9f:9f:dc:00:4a:70:ae:d9:c3:44:cd:3f:54:3a: a5:3c:9f:47:b6:18:3f:89:34:73:15:7a:f5:cf:2f:9b:2c:33: a8:4a:46:65:61:d4:5a:cc:5a:dd:37:59:ec:69:df:95:4a:e6: 22:aa:4c:38:e9:c0:b0:35:09:c9:53:27:ae:38:8a:08:62:0b: 42:91:97:6d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RENGNTExMC8GA1UEBRMoREYwRDUwQzdFRTJCMTE3NkQ1OEQxOEQ4NUQyNTkyOTM2 QUQ3QjI0NjAeFw0yNjA1MTEwODM5MTNaFw0yNjA1MTgwODM5MTNaMBgxFjAUBgNV BAMTDTZhMDE5NWIxLTUxYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM9P+NhBxDlftSb4Ah71X4JGuIWeZ4RdiF02DSbw07Nx6YKCciDZOwT4qexox1 MLyF+PzjE4xqwt3cmcgLlsE8rSrLEIYW8Rd/6Nc10Rd1WN/NglRB62KoUJaBBKNy tAK8Z0DuyncVcSria0ZqtlibwO+yWZZH9kl3CaKqG5BrLzncFzWw5Ki+30dn5i/5 Y+HCVYs98vEXaNFN224yG+3O9FK4CtY9IX2dEvwddnMQ3My7AwAgU17s+qKn9XF7 vgy/oSHgroYbTKcfahFJ1OP/5HQ4gNTcwCV37b6Oet0eYr9hPk924VfRlIwuNrVL 7+Ih8t77h9PtuS4UK9SC7cKfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHCfriSp3 RLJxEA7KehVd/D/0RxwwHwYDVR0jBBgwFoAU3w1Qx+4rEXbVjRjYXSWSk2rXskYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQ0Y1Lzc1RkU2RjRBRjFF MzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhiVmpSallYU1dTazJyWHNr WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvM3cxUXgtNHJFWGJWalJqWVhTV1NrMnJYc2tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Q0Y1Lzc1RkU2RjRBRjFFMzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhi VmpSallYU1dTazJyWHNrWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQALU8M9g3YLGa/z/pBGC8BYdE5ZoAbMhTVUInQZWFTd82Y2SYhDAewOpt3JmkZQ NFYm3Dsr9R3mbvlXXyqhd12WqGx+TzeGldUU4YpaiuSDor3F9gml/yPtYBJoyPxJ d2VqKdOfEbA9E286XdH3yGDKD2f8nmoWE27p6HEmhaupqq0a0vIC97NfT+fn2QXM f9qXazpzzcQp/fzuKyK22WOdxx/e9AZmj+sGouHPhrKr2OFFbV/zI5pLn5/cAEpw rtnDRM0/VDqlPJ9Hthg/iTRzFXr1zy+bLDOoSkZlYdRazFrdN1nsad+VSuYiqkw4 6cCwNQnJUyeuOIoIYgtCkZdt -----END CERTIFICATE-----Generated at Wed May 13 06:23:31 2026 by rpki-client